[SURBL-Discuss] Stats wanted

[Ed Kasky]

At 05:29 AM Saturday, 10/18/2008, you wrote -=>
>Jeff Chan wrote:
> > Hi All,
> > SURBL is looking for statistics about what portion of unsolicited our
> > lists are detecting (ideally in large mail flows).  An overall number
> > would be ideal, as in what fraction of total unsolicited messages are
> > caught by any SURBL list.  One possible way to measure this from
> > SpamAssassin-processed messages would be to count the messages marked
> > as spam that had 'SURBL' in their scores versus the ones that didn't
> > have a SURBL rule hit.  The ratio would be the spams with SURBL hits
> > divided by total number of spams.
> >
> > Another way would be to count the SURBL hits from an MTA milter, but
> > to have the meaningful denominator, one would need a count of the
> > total spams, which a simple SURBL-only milter would not be able to
> > provide.  Something else, or a more sophisticated milter would need to
> > count the total spams in order to get the denominator.
> >
> > Ideally the results would be after MTA blocking with a major sender
> > blacklist like zen.spamhaus.org.  Please let us know whether a sender
> > blacklist is used in the MTA or not.
> >
> > Any results would be greatly appreciated.
> >
>
>Hi,
>
>  From about a weeks worth of data with the MTA blocking using 3 sender
>blacklists. There are 2 separate MXs with 2 spamd machines in round robin.
>
>[spa010 spamd]# grep "identified spam" * | wc -l  - Spam
>57993
>[spa010 spamd]# grep SURBL * | wc -l  - SURBL hits
>43077
>[spa010 spamd]#  grep bytes * | wc -l  - Total Messages
>180763

Hello,

FWIW, we run a small server with only a few users and low traffic but I grep'd
a couple of weeks worth of logs. One MX, one machine, with MTA blocking using
3 blacklists, access.db and Sendmail RDNS.  I actually wind up 
blocking more at the MTA
using RDNS than ever before.

[yoda spamd]# grep "identified spam" /var/log/maillog* | wc -l  -Spam 5562
[yoda spamd]# grep SURBL /var/log/maillog* | wc -l 3581 - SURBL Hits
[yoda spamd]# grep bytes /var/log/maillog* | wc -l 22139 - Total Messages

HTH,

Ed


...........................................................................
Randomly Generated Quote (378 of 1466):
According to my best recollection, I don't remember.
- Vincent "Jimmy Blue Eyes" Alo